Skip to main content
Oct 11, 2026 5:54 PM UTC
Question

Feature request: New Setting: Allow vault access from desktop devices only

This is major security improvement and mitigation against the constantly growing mobile device thefts. Not all vaults should be accessible from mobile devices, they should be allowed to be used from desktop devices only.

Mobile devices are most vulnerable for being stolen and because those same devices typically carry also the MFA authenticators, if attacker gets access to the phone, they might be able to actually login to numerous services.

People carry phones everywhere and they input their passcodes everywhere which makes them vulnerable for passcode lurking. Criminals can also drug people and demand them to then open their phones. In such situation, you really wish the confidential vaults would not be available on those phones.
And they should not be.

So, we need new organizational default setting if vaults are available on mobile devices or not and then vault level setting to override that if needed. For example, org level default would be to disallow mobile device access, but it could be allowed for specific vaults that are actually needed on mobile devices.

1 reply

Trevor_1P
1Password Employee
1Password Employee
Oct 13, 2026 6:56 PM UTC

Hi ​@Jouko Nyholm,

Thank you for the request! With 1Password Business, you can select whether a specific vault can be accessed on 1Password.com, in the 1Password extension, 1Password CLI, or specific 1Password apps. You can read more about that here: Create, share, and manage vaults in your organization

To confirm, are you specifically looking for an account-wide policy to control this, with the ability to override it for specific vaults (like what I linked to above)?